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5 METHOD AND APPARATUS FOR 

PASSWORD ENTRY USING DYNAMIC 
INTERFACE LEGITIMACY INFORMATION 

Field Of The Invention 

10 

The invention relates generally to apparatus and methods for providing secure 
entry of passwords, and more particularly to methods and apparatus that provide 
password entry interface security enhancement. 

15 

Background Of The Invention 

Passwords are used to gain access to software applications, bank vaults and a 
litany of other sources or processes. In computer systems, telecommunication systems 

20 and other systems, password entry interfaces are used that typically prompt a user to enter 
a password to gain access to protected information, products, or any other protected 
sources. Where password entry interfaces are implemented through software programs, 
such as graphic user interfaces, DOS based password prompts or similar password entry 
interfaces, there is typically no way for a user to know they are about to type a password 

25 into a real program or a malicious program designed to mimic the real program. For 
example, where a password entry interface is employed using a graphic user interface to 
allow a user to gain access to a cryptographic security engine on a network, information 
over the Internet from a Web page, or any other suitable source, a Trojan horse program, 
or other malicious program, can attempt to mimic the password entry interface thereby 

30 allowing an unscrupulous party to obtain a given password. The password may then be 
used to break into protected sources. In the context of a computer system, when the 
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password is stolen, a hacker can gain access to the computer system and highly 
confidential information. 

Typical password entry interfaces may include, for example, a Windows-based 
5 graphic user interface dialog box known to be used by many software applications and 
operating systems. These dialog boxes typically include a field for a user's name and 
other field for the user to enter a password or other information via a keyboard or other 
biometric input device, such as a thumb print, retinal scan information, or other suitable 
biometric input to be used as a password. However, such password entry interfaces are 
10 typically static in nature and relatively easy to mimic by a malicious program. In 
addition, the interfaces are typically the same for all users for a given software 
application, or operating system. As a result, a malicious program may be inadvertently 
downloaded through e-mails, or other communications without a user's knowledge. 

15 Also, it is generally known to provide three dimensional rotating symbols during, 

for example, an encrypted Internet session, to show that an encrypted session is in 
progress. Such three dimensional rotating symbols may appear, for example, in a Web 
browser when a secure session has been set up between a Web browser and a Web server. 
However, such known systems typically provide a static password entry interface that can 

20 be readily mimicked by a malicious program. 

Consequently, there exists a need for a method and apparatus that facilitates 
prevention of a mimicking of a password entry interface so that a user can detect that a 
malicious program is attempting to steal and enter the password. 



25 



Brief Description Of The Drawings 



30 



The invention will be more readily understood in view of the below-described 
drawings, wherein: 

FIG. 1 is a block diagram illustrating one example of a password entry apparatus 
in accordance with one embodiment of the invention; 
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FIG. 2 is a graphical representation of a password entry interface in accordance 
with one embodiment of the invention; 

FIG. 3 is a flow chart illustrating one example of the operation of the apparatus of 
FIG. l;and 

5 FIG. 4 is a flow chart illustrating an alternative password entry method in 

accordance with one embodiment of the invention. 



Detailed Description Of The Preferred Embodiment 



1 0 Briefly, a password entry method and apparatus prompts a user for entry of a 

password and outputs dynamic password entry interface legitimacy information in 
response to the prompt for entry of the password. The dynamic password entry interface 
legitimacy information may be a hard to duplicate or hard to predict animated image 
(e.g., image that changes over time), audio sequence, or other suitable legitimacy 

1 5 information that allows a user to visually or audibly determine whether the password 
entry interface being presented is legitimate. Accordingly, the user knows whether or 
not to trust, or have a high confidence level of the legitimacy of the password entry 
interface, such as a password dialog box displayed on a display device, for example. 



20 In one embodiment, the dynamic password entry interface legitimacy information 

is a three dimensional moving image that is presented either prior to prompting for entry 
of the password, subsequently after prompting for entry of the password, or is output 
during the prompting for the entry of the password. In another embodiment, the dynamic 
password entry interface legitimacy information is audible information that may be 

25 recognized by user as being an original audible output associated with a trusted password 
entry interface presented on a display screen. 

In another embodiment, a method and apparatus provides a plurality of animated 
images, such as images that change over time, from which a user may select or which can 
30 be automatically selected. The selected image is then shown to the user along with the 
prompt for entry of the password for subsequent entries of the password. The user, 
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having selected one of a plurality of animated images, recognizes whether or not the 
presented image in the password entry interface is the one selected and therefore knows 
whether or not to continue entering password information as requested by the password 
entry interface. Since the dynamic password entry interface legitimacy information is a 
5 hard to produce moving image or audible set of frequencies, it is more difficult for a 

malicious program to mimic the password dialog box containing, or otherwise associated 
with, the dynamic password entry interface legitimacy information. Accordingly, with 
selectable animated images, an attacker must not only mimic the hard to duplicate 
animated image, but an attacker also has to know which of the potential animated images 
1 0 was selected by the user. 

FIG. 1 illustrates a password entry apparatus 100 having a processing unit 102, a 
display device 104 and/or audible generating device 106, memory 108 and a password 
entry device 110. By way of example, and not limitation, the processing unit 102 may 

15 be, for example, a personal computer, portable telecommunications device, television, 
wireless communication device such as an information appliance, or any other suitable 
processing unit that may be used to prompt a user or software application or other source, 
for entry of a password to gain access to a protected product, application, or other 
process. The display device 104 may be, for example, any suitable display device such as 

20 an LCD display, flat panel display, CRT, television display, or any other suitable display 
device. The audible generating device 106 may be, for example, any suitable hardware 
or software, including speakers that may output audible signals. The memory 108 may 
be any suitable memory operatively coupled to the processing unit for storing, inter alia, 
dynamic password entry interface legitimacy information 112, such as password entry 

25 animated images as further described below. The password entry device 110 may be, for 
example, a keyboard, voice activated input mechanism, biometric input mechanism, a 
smart card reader or any other suitable password entry mechanism. The password entry 
device 1 10 is operatively coupled to the processing unit 102 so that the processing unit 
102 receives the entered password 114. For purposes of illustration only, the disclosed 

30 apparatus and methods will be described with reference to a computer, such as a personal 
computer. However, it will be recognized that any suitable networked, non-networked, 
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wireless, non-wireless, stand alone, portable, or any other suitable apparatus, or system 
may also employ the herein described invention. 

The processing unit 102 is operative to provide a password entry interface, 
5 generally shown as 1 16, via the display device 104 and/or an audible generating device 
106. The processing device 102 provides the password entry interface 1 16 to provide a 
prompt for entry of a password. The memory 108, such as RAM, ROM, or other suitable 
storage device contains dynamic password entry interface legitimacy information 1 12 for 
output to the display device and/or audible generating device 104, 106 to provide 
10 password entry interface security enhancement. The memory 108, for example, where it 
is memory accessible by a personal computer, contains one or more suitable programs to 
generate the graphic user interface (GUI). Accordingly, in a preferred embodiment, the 
password entry interface is a GUI based password entry interface, such as that shown, for 
example, in FIG. 2. However, it will be recognized that a non GUI may also be used. 

15 

Referring to FIG. 2, the password entry interface 1 16 as shown on display device 
104, may include dynamic password entry interface legitimacy information 112, such as a 
three dimensional rotating animated image 200 that is difficult to reproduce. In addition, 
if desired, the password entry interface 116 may include a graphic box associated with a 

20 user ID field 202 for the user, for example, to enter the user's name, or any other suitable 
identification information. The password entry interface 1 16 also includes a password 
prompt field 204, into which a user enters the password that has been prompted for. In 
addition, other activation buttons generally shown as 206 may also be provided through 
the graphic user interface. For example, once a password has been entered (e.g., the 

25 appropriate text has been entered, and/or biometric information through the use of a 
biometric input device), the "OK" button 208 may be activated to signal the processing 
unit to accept the entered password. 

Referring back to FIG. 1, the dynamic password entry interface legitimacy 
30 information 112 stored in memory may include, for example, three dimensional rotating 
images that are displayed before, during or after the prompt for entry of the password. 
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The processing device 102 outputs the dynamic password entry interface legitimacy 
information 1 12 to the display device and/or audible generating device 106, 104 in 
response to the prompt for entry of the password. In this example, the prompt for entry 
of the password is the password box 204 (FIG. 2). However, it will be recognized that 
5 other graphic user interfaces, a simple flashing cursor or other suitable mechanism may 
serve as a prompt for entry of a password. Although not shown in FIG. 2, additional text 
may be included in the password entry interface 116. For example, instructions for the 
user to visually confirm that the displayed dynamic password entry interface legitimacy 
information 112 has not changed from that previously displayed may be provided. 

10 

Where the dynamic password entry interface legitimacy information is an 
animated image whether, meaning for example, an image having what appear to be 
moving components, a still image that changes over time, or any suitable information that 
changes over time, the processing device displays the animated image 200 in connection 
15 with the prompting for entry of the password. Accordingly, the animated image 200 may 
be displayed at the same time the prompt for the password is given, prior to the 
prompting for the password, or subsequent to the prompting of the password. As used 
herein, the animated image includes data or programming code that and when stored, can 
later be made to appear to have portions vary over time when displayed or audibly output. 

20 

In any event, the animated image 200 is presented so that the user can visually 
confirm that their animated image is appropriate so that the user may enter the password 
believing that the password entry interface is a legitimate password entry interface as 
opposed to one generated by a malicious program. If the animated image 200 is different 
25 from that what the user expects, the user then does not enter the password in the 

password entry interface 116 since it is likely to have been generated by a malicious 
program. 

In addition to, or as an alternative to providing animated image information, the 
30 processing unit may also store audible information, such as tones, a user's voice, songs, 
or any other suitable audible information that can serve as the dynamic password entry 
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interface legitimacy information 112. Where this information 1 12 includes audible 
information, the processing device provides the audible information 1 1 8 to the audible 
generating device so that in the same way that the animated image is used, the audible 
output serves as a mechanism to allow the user to audibly confirm that the password 
5 entry interface is legitimate since the audible tone or information being generated should 
be identical to that provided by the user. 

Referring to FIGs. 1 and 2, where the dynamic password entry interface 
legitimacy information 1 12 is an animated image (or a plurality of animated images) the 
10 processing unit 102 retrieves from the memory 108, the animated image and displays the 
animated image as part of the password entry interface 1 16 on the display device 104. 
However, it will be recognized that the animated image may be displayed separately from 
the password entry interface so that it appears apart from or at a different time than the 
password dialog box, for example. 

15 

In an alternative embodiment, the dynamic password entry interface legitimacy 
information 112 may be an expected graphical pattern that changes in response to entry 
of one or more entered password characters. This may be used alone or in addition to the 
animated image 200. For example, an animated image that is changes over time may 

20 have changes to its pattern via different colors or other suitable differentiating visual 

changes that are made by the processing unit in response to entry of one or more entered 
password characters entered through the password entry device 110. In this embodiment, 
an additional level of security is provided since not only must an attacker recreate the 
animated image, such as a 3D rotational image, but must also appropriately mimic 

25 graphical patterns that change in response to entry of password characters. By way of 
example, if the animated image 200 is a rotating sphere with a random number pattern 
appearing on the outer surface thereof, sections of this sphere may be changed in color 
each time a correct password character has been received by the processing unit. The 
graphical pattern may be selected from a group of pattern changing algorithms stored in 

30 memory 108 and selected by a user upon initial log in of the system so that the user will 
recognize and remember which pattern changing algorithm was selected. 
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In addition, another alternative embodiment may include, for example, the 
processing device 102 altering one or more features of the animated image in response to 
entry of one or more entered password characters. For example, using the same example 
5 above, the rotating sphere may be elongated to a greater extent each time a password 
character is entered through the password entry device. It will also be recognized that 
other suitable visual changes to the animated images, or other portions of the password 
entry interface may also be employed. 

10 In yet another embodiment, the animated image is a still image that changes 

dynamically before, after, or while the password is being typed in. For example, a static 
image of words are displayed and the words are covered up with a certain pattern or 
revealed if hidden in a certain pattern as one or more password characters are entered. 

15 Although it is preferred that the processing device display the animated image 200 

during the allowance of password input, the processing device may be suitably 
programmed to display the animated image prior to allowing input of a password or may 
be programmed to display the animated image after allowing input of a password but, for 
example, prior to accepting the password. As shown in FIG. 2, the processing device 

20 displays the password entry interface 1 16 as having a password entry field 204. 

Although the password entry field 204 is shown, it will be recognized that the processing 
device can alternately, or in addition, receive biometric information such as eye scan 
information, thumbprint information, or other biometric information through a suitable 
biometric input device serving as the password entry device, in response to displaying the 

25 password entry interface 116. 

In an alternative embodiment, instead of containing a single animated image for a 
given user or for a given software application, the memory 108 may contain a plurality of 
selectable animated images as the dynamic password entry interface legitimacy 
30 information. In this embodiment, the processing unit is suitably programmed to receive 
selection data, such as an activation of a selection button through a graphic user interface, 



9 




that identifies which of the plurality of selectable animated images have been selected by 
a user for output on the display device during prompting for password entry. By way of 
example, the processing unit, upon initial log in, displays the plurality of animated 
images on the display device so that a user may select which of the plurality of animated 
5 images will be used as the dynamic password entry interface legitimacy information 1 12. 
Accordingly, a user may customize the password entry interface to contain a particular 
animated image. In yet another embodiment, the animated image may be, for example, a 
moving picture of the user, or any other suitable video that the user wishes to store in 
memory and use as the dynamic password entry interface legitimacy information. 

10 

FIG. 3 illustrates one example of a password entry method utilized by the 
apparatus shown in FIG. 1 . In this example, the processing unit 102 stores an animated 
image for retrieval for use as part of a password entry interface The animated image can 
be embedded in the password program itself. For example, the animated image is coded 

15 such that the code draws the animated image and this code is embedded and part of the 
password program. The animated image serves as the dynamic password entry interface 
legitimacy information 1 12. This is shown in block 300. The storage of the animated 
image, such as a three dimensional rotating image, typically occurs once during 
initialization. As shown in block 302, the processing unit 102 detects a password prompt 

20 command from, in this example, a software application that requires entry of a password 
to gain access to protected information, such as access to a public key information 
security engine. As shown in block 304, the processing unit 102 prompts for entry of a 
password by including the password field 204 as part of the password entry interface 116. 
The password entry interface 1 16 is displayed on display device 104. As shown in block 

25 306, the processing unit 102 retrieves the associated animated image from memory that is 
associated with the particular password entry interface being displayed. As shown in 
block 308, the processing unit 102 displays the stored animated image, retrieved from 
memory, during the prompting for entry of a password, to provide password entry 
interface security enhancement. In a preferred embodiment, the animated image is 

30 displayed at the same time as the prompt for the password. Accordingly, the processing 
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unit 102 outputs the dynamic password entry interface legitimacy information 112, (e.g., 
the animated image) in connection with the prompting for entry of the password. 

As shown in block 310, the method includes determining whether a password has 
5 been entered As shown in block 310, the processing unit determines if it has received 
selection data, such as entry of a return key or activation of a GUI "OK" button 
200indicating that the password has been entered. If the password has not been detected 
as being entered, the processing device continues to display the prompt for entry of the 
password and continues to display the animated image as shown in block 312. 

10 Alternatively, if a password has not been entered in a predetermined period of time, the 
processing unit can notify the user to retry entry of the password. If it has been detected 
that the password has been entered, the processing unit verifies the entered password, as 
shown in block 314. This is done in a conventional manner. . For example, if biometric 
information serving as a password or a portion of the password the processing unit 

15 determines if the entered password information 114 matches the expected password. 
Likewise, if the password entry device includes entry of password characters via 
keyboard or smart card reader or from some other source, again, the processing unit 
compares the entered password with the expected password to determine if the password 
has been entered. As shown in block 316, if the entered password matches the expected 

20 password, the processing unit 102 grants access to the protected information, such as a 
cryptographic key associated with an information security engine, a protected device or 
other protected process, in response to receiving the valid password information after a 
prompt for the password. 

25 FIG. 4 illustrates an alternative method that employs selectable animated images 

as the dynamic password entry interface legitimacy information 112. As shown in block 
400, the method includes storing the plurality of animated images as the dynamic 
password entry interface legitimacy information 1 12 in memory 108. As shown in block 
402, the processing unit 102 retrieves the dynamic password entry interface legitimacy 

30 information, e.g., multiple password entry animated images, from memory. As shown in 
block 404, the processing unit, through a suitable graphical user interface command, 
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prompts a user for selection of one of the plurality of selectable animated images to serve 
as the animated image to be displayed as part of the password entry interface (e.g., dialog 
box). As shown in block 406, the processing unit determines whether selection has been 
made by, for example, determining whether a select button has been activated for a given 
5 displayed animated image. If no selection is made, the processing unit waits until a 

selection is made by a user. If it is determined that a selection has been made, the process 
includes storing the selected animated image for that user for that particular application, 
in memory, as shown in block 408. This occurs, for example, during initialization. The 
process continues to block 302, as previously described with reference to FIG. 3. 

10 

Accordingly, the disclosed apparatus and methods provide dynamic password 
entry interface legitimacy information, that is difficult to mimic, during prompts for entry 
of passwords. As a result, a user can detect whether a malicious program has attempted 
to mimic a password entry interface so that the user is less susceptible to theft of 
15 password information. Differing degrees of protection can be provided depending upon 
the complexity of the animation. 

If desired, the disclosed apparatus and methods may be implemented using one or 
more suitably programmed processing devices such as a personal computer, 
20 microprocessor, hand held processing units or any other suitable processing devices. A 
storage medium, such as a CD ROM, DRAM, fixed or portable storage device, a remote 
storage device, such as a network server, or any other suitable storage medium may 
contain programming instructions that when executed by one or more processors, causes 
the one or more processors to carry out the operations and function described herein. 

25 

As used herein, dynamic password entry interface legitimacy information 
includes, but is not limited to, data that changes over time including moving images, still 
images that vary over time, whether video or graphic, same frequency audio output, 
different frequency audio output, or any suitable combination thereof that is output in 
30 connection with prompting for a password to gain access to a task, software application 
or any other process. 
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It should be understood that the implementation of other variations and 
modifications of the invention in its various aspects will be apparent to those of ordinary 
skill in the art, and that the invention is not limited by the specific embodiments 
described. It is therefore contemplated to cover by the present invention, any and all 
modifications, variations, or equivalents that fall within the spirit and scope of the basic 
underlying principles disclosed and claimed herein. 
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